{"record":{"id":"7f3eb9accda35732","repo":"RocketChat/Rocket.Chat","slug":"too-many-issuers","errorCode":null,"errorMessage":"Too many Issuers","messagePattern":"Too many Issuers","errorType":"exception","errorClass":"Error","httpStatus":null,"severity":"error","filePath":"apps/meteor/server/lib/saml/lib/parsers/Response.ts","lineNumber":400,"sourceCode":"\t\t\t\treturn false;\n\t\t\t}\n\t\t} catch (e) {\n\t\t\tSAMLUtils.log(e instanceof Error ? e.message : String(e));\n\t\t\treturn false;\n\t\t}\n\n\t\tif (!this.signatureCoversElement(sig, expectedId)) {\n\t\t\tSAMLUtils.log('Failed to validate SAML signature: signed reference does not match the processed element');\n\t\t\treturn false;\n\t\t}\n\n\t\treturn true;\n\t}\n\n\tprivate getIssuer(assertion: Element): any {\n\t\tconst issuers = assertion.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Issuer');\n\t\tif (issuers.length > 1) {\n\t\t\tthrow new Error('Too many Issuers');\n\t\t}\n\n\t\treturn issuers[0];\n\t}\n\n\tprivate getSubject(assertion: Element): XmlParent {\n\t\tlet subject: XmlParent = assertion.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'Subject')[0];\n\t\tconst encSubject = assertion.getElementsByTagNameNS('urn:oasis:names:tc:SAML:2.0:assertion', 'EncryptedID')[0];\n\n\t\tif (typeof encSubject !== 'undefined') {\n\t\t\tconst options = { key: this.serviceProviderOptions.privateKey, disallowDecryptionWithInsecureAlgorithm: false };\n\t\t\txmlenc.decrypt(encSubject.getElementsByTagNameNS('*', 'EncryptedData')[0], options, (err, result) => {\n\t\t\t\tif (err) {\n\t\t\t\t\tSAMLUtils.error({ err });\n\t\t\t\t}\n\t\t\t\tsubject = new xmldom.DOMParser().parseFromString(result, 'text/xml');\n\t\t\t});\n\t\t}","sourceCodeStart":382,"sourceCodeEnd":418,"githubUrl":"https://github.com/RocketChat/Rocket.Chat/blob/b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0/apps/meteor/server/lib/saml/lib/parsers/Response.ts#L382-L418","documentation":"Error \"Too many Issuers\" thrown in RocketChat/Rocket.Chat.","triggerScenarios":"Thrown when a SAML Response contains more than one Issuer node.","commonSituations":"See trigger scenarios.","solutions":["Check the IdP so the response contains a single Issuer element; inspect the raw SAML response."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0","analyzedAt":"2026-08-18T15:26:39.429Z","contentChangedAt":"2026-08-18T15:26:39.429Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}